Before you begin configuring HA
High Availability
High Availability
FortiGate-7000 supports a variation of active-passive FortiGate Clustering Protocol (FGCP) high availability
between two identical FortiGate-7000 chassis. With active-passive FortiGate-7000 HA, you create redundant
network connections to two identical FortiGate-7000s and add redundant HA heartbeat connections. Then you
configure the FIM interface modules for HA. A cluster forms and a primary chassis is selected.
Example FortiGate-7040
All traffic is processed by the primary (or master) chassis. The backup chassis operates in hot standby mode. The
configuration, active sessions, routing information, and so on is synchronized to the backup chassis. If the
primary chassis fails, traffic automatically fails over to the backup chassis.
The primary chassis is selected based on a number of criteria including the configured priority, the bandwidth, the
number of FIM interface failures, and the number of FPM or FIM modules that have failed. As part of the HA
configuration you assign each chassis a chassis ID and you can set the priority of each FIM interface module and
configure module failure tolerances and the link failure thresholds.
Before you begin configuring HA
Before you begin, the chassis should be running the same FortiOS firmware version and interfaces should not be
configured to get their addresses from DHCP or PPPoE. Register and apply licenses to the each FortiGate-7000
57
FortiGate-7000
Fortinet Technologies Inc.
